Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/vnJfxj_0HgIWmNUxOrVaxs_RKts.roa
File: vnJfxj_0HgIWmNUxOrVaxs_RKts.roa (raw, json)
Hash identifier: +fzO3S12e2fZECdIZcgWF/icB/8oRbeb3sroMYuDx70=
Subject key identifier: BE:72:5F:C6:3F:F4:1E:02:16:98:D5:31:3A:B5:5A:C6:CF:D1:2A:DB
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 2B101764
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/vnJfxj_0HgIWmNUxOrVaxs_RKts.roa
Signing time: Tue 19 Apr 2022 12:31:43 +0000
ROA not before: Tue 19 Apr 2022 12:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39150
IP address blocks: 93.179.64.0/23 maxlen: 23
93.179.69.0/24 maxlen: 24
93.179.68.0/23 maxlen: 23
93.179.68.0/24 maxlen: 24
93.179.67.0/24 maxlen: 24
2a02:d0c0::/32 maxlen: 32
2a02:ec40::/29 maxlen: 29
2a02:ec40::/32 maxlen: 32
2a02:d0c1::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722474852 (0x2b101764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Apr 19 12:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be725fc63ff41e021698d5313ab55ac6cfd12adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:8f:83:e5:a2:55:e2:56:bf:e3:7e:e5:fc:
2a:91:a9:5b:d7:61:ef:00:9d:ca:a2:ff:9a:f3:9b:
2a:b6:8b:c9:48:77:1e:fc:d1:39:28:82:8e:4d:88:
38:ca:aa:b0:eb:71:ab:e9:1a:06:c5:8d:87:b5:2d:
13:5f:e8:2c:81:38:a4:c4:7b:86:03:1c:5f:a0:e4:
3a:b6:f5:b4:c2:28:22:69:6d:68:ae:38:f2:14:26:
ec:da:d8:5c:65:1c:1b:a2:23:c6:e3:77:90:76:21:
6d:8c:21:76:8d:de:14:21:92:2e:f2:51:dd:fd:78:
45:a7:5a:cf:e0:a1:c8:c4:d5:71:8c:9b:57:fa:c9:
2f:7f:5a:6b:69:2f:36:04:b9:ac:5d:95:ff:e2:36:
0c:dd:b2:59:a6:48:8b:15:63:69:f7:50:8e:0f:8f:
28:1d:3e:d0:5d:da:14:8c:3a:01:7d:0f:c2:ab:c2:
e1:18:87:05:c9:59:b4:37:67:c2:15:30:bc:2b:9b:
a3:c2:ad:86:b9:cb:52:71:28:3b:65:ba:45:b8:7a:
52:dc:0d:f4:64:71:20:6b:aa:9f:05:b0:c8:f3:47:
18:1c:df:27:9a:ba:c1:56:ab:a1:95:f3:19:d8:13:
2f:a3:ae:5b:1f:2b:c6:35:d9:ea:66:81:e6:37:8d:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:5F:C6:3F:F4:1E:02:16:98:D5:31:3A:B5:5A:C6:CF:D1:2A:DB
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/vnJfxj_0HgIWmNUxOrVaxs_RKts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.64.0/23
93.179.67.0-93.179.69.255
IPv6:
2a02:d0c0::/31
2a02:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
29:6d:c5:5c:78:ca:d3:04:02:0c:e5:2f:f7:83:be:1f:ff:00:
65:3b:95:9f:19:23:bb:fd:c6:d7:79:1b:6d:27:00:de:72:6b:
b0:5a:67:6e:8c:85:ec:c9:df:e0:1f:21:29:9e:66:a3:81:81:
c0:bf:c9:b4:2b:f5:95:0d:cc:65:b4:61:20:f3:d8:72:62:f3:
2a:17:c2:07:0e:42:ea:d8:4a:00:de:29:4b:6f:2a:91:2c:de:
d0:12:2c:ae:9b:90:04:48:87:a2:80:14:53:2a:97:a2:ef:b4:
12:be:98:06:18:b9:65:38:ed:08:cb:6e:66:93:f7:64:e9:af:
6d:11:7b:b7:6d:e2:0d:16:90:65:41:c0:43:4e:84:4f:29:5f:
f2:63:e0:42:8a:86:91:08:b6:63:81:bc:74:c5:04:7e:cb:14:
8f:83:74:24:91:15:72:b7:30:26:b9:6e:d5:31:25:e7:d4:30:
53:f1:ee:a3:80:fb:b6:52:7c:b5:bd:f4:73:ef:6b:3b:82:82:
73:c2:ad:6b:06:ea:1c:30:0f:59:33:87:05:73:34:3c:ed:24:
68:f3:eb:39:72:e8:dc:e1:70:9f:2a:c4:10:e1:a3:92:4c:d0:
fd:9d:f2:53:72:f7:67:28:0b:a9:6f:e1:20:97:78:73:28:b6:
49:f9:b9:f1
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEKxAXZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDQ1ZGFjYzgzNzc5OGMzZTZjZjMxZjRkMjc5NDZhMzNiMGRlNjYxMB4XDTIyMDQx
OTEyMzE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU3MjVmYzYzZmY0
MWUwMjE2OThkNTMxM2FiNTVhYzZjZmQxMmFkYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLwj4PlolXiVr/jfuX8KpGpW9dh7wCdyqL/mvObKraLyUh3
HvzROSiCjk2IOMqqsOtxq+kaBsWNh7UtE1/oLIE4pMR7hgMcX6DkOrb1tMIoImlt
aK448hQm7NrYXGUcG6IjxuN3kHYhbYwhdo3eFCGSLvJR3f14Radaz+ChyMTVcYyb
V/rJL39aa2kvNgS5rF2V/+I2DN2yWaZIixVjafdQjg+PKB0+0F3aFIw6AX0PwqvC
4RiHBclZtDdnwhUwvCubo8KthrnLUnEoO2W6Rbh6UtwN9GRxIGuqnwWwyPNHGBzf
J5q6wVaroZXzGdgTL6OuWx8rxjXZ6maB5jeN738CAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBS+cl/GP/QeAhaY1TE6tVrGz9Eq2zAfBgNVHSMEGDAWgBQQRdrMg3eYw+bP
MfTSeUajOw3mYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VFWGF6SU4zbU1QbXp6SDAwbmxHb3pzTjVtRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8x
L3ZuSmZ4al8wSGdJV21OVXhPclZheHNfUkt0cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8xL0VFWGF6SU4zbU1Q
bXp6SDAwbmxHb3pzTjVtRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwGgQCAAEwFAMEAV2zQDAMAwQAXbNDAwQBXbNEMBQE
AgACMA4DBQEqAtDAAwUDKgLsQDANBgkqhkiG9w0BAQsFAAOCAQEAKW3FXHjK0wQC
DOUv94O+H/8AZTuVnxkju/3G13kbbScA3nJrsFpnboyF7Mnf4B8hKZ5mo4GBwL/J
tCv1lQ3MZbRhIPPYcmLzKhfCBw5C6thKAN4pS28qkSze0BIsrpuQBEiHooAUUyqX
ou+0Er6YBhi5ZTjtCMtuZpP3ZOmvbRF7t23iDRaQZUHAQ06ETylf8mPgQoqGkQi2
Y4G8dMUEfssUj4N0JJEVcrcwJrlu1TEl59QwU/Huo4D7tlJ8tb30c+9rO4KCc8Kt
awbqHDAPWTOHBXM0PO0kaPPrOXLo3OFwnyrEEOGjkkzQ/Z3yU3L3ZygLqW/hIJd4
cyi2Sfm58Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:17 2025 by rpki-client